zar-cli 0.2.0

A command-line utility for reading and writing MacOS signed XAR archives.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

use std::fs::create_dir_all;
use std::fs::remove_dir_all;
use std::fs::remove_file;
use std::process::Command;

use arbtest::arbtest;
use random_dir::DirBuilder;
use tempfile::TempDir;

#[test]
#[cfg_attr(
    target_os = "macos",
    ignore = "`openssl` on MacOS doesn't support `-traditional`"
)]
fn sign_verify() {
    let workdir = TempDir::new().unwrap();
    let private_key_pem = workdir.path().join("private-key.pem");
    let cert_pem = workdir.path().join("cert.pem");
    let archive_xar = workdir.path().join("archive.xar");
    let unpack_dir = workdir.path().join("unpacked");
    // Generate PKCS1 PEM-encoded RSA key.
    assert!(Command::new("openssl")
        .arg("genrsa")
        .arg("-traditional")
        .arg("-out")
        .arg(&private_key_pem)
        .arg("2048")
        .status()
        .unwrap()
        .success());
    // Generate PKCS1 certificate.
    assert!(Command::new("openssl")
        .arg("req")
        .arg("-x509")
        .arg("-sha1")
        .arg("-days")
        .arg("1")
        .arg("-noenc")
        .arg("-key")
        .arg(&private_key_pem)
        .arg("-out")
        .arg(&cert_pem)
        .arg("-subj")
        .arg("/CN=Zar")
        .status()
        .unwrap()
        .success());
    arbtest(|u| {
        remove_file(&archive_xar).ok();
        let directory = DirBuilder::new()
            .printable_names(true)
            .file_types([
                random_dir::FileType::Regular,
                random_dir::FileType::Directory,
            ])
            .create(u)?;
        remove_dir_all(&unpack_dir).ok();
        create_dir_all(&unpack_dir).unwrap();
        assert!(test_bin::get_test_bin!("zar")
            .arg("--sign")
            .arg(&private_key_pem)
            .arg("--cert")
            .arg(&cert_pem)
            .arg("-cf")
            .arg(&archive_xar)
            .arg(directory.path())
            .status()
            .unwrap()
            .success());
        assert!(test_bin::get_test_bin!("zar")
            .arg("--trust")
            .arg(&cert_pem)
            .arg("-xf")
            .arg(&archive_xar)
            .arg(&unpack_dir)
            .status()
            .unwrap()
            .success());
        Ok(())
    });
}